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DETAILED ACTION 
Information Disclosure Statement 

1 . The information disclosure statement filed May 15, 2002 fails to comply with 37 
CFR 1.98(a)(2), which requires a legible copy of each cited foreign patent document; 
each non-patent literature publication or that portion which caused it to be listed; and all 
other information or that portion which caused it to be listed. It has been placed in the 
application file, but the information referred to therein, unless the references have been 
cited by the examiner on form PTO-892, they have not been considered. 

Drawings 

2. The drawings are objected to as failing to comply with 37 CFR 1 .84(p)(5) 
because they include the following reference character(s) not mentioned in the 
description: 1 (figure 1). Corrected drawing sheets in compliance with 37 CFR 1.121(d), 
or amendment to the specification to add the reference character(s) in the description in 
compliance with 37 CFR 1.121(b) are required in reply to the Office action to avoid 
abandonment of the application. Any amended replacement drawing sheet should 
include all of the figures appearing on the immediate prior version of the sheet, even if 
only one figure is being amended. Each drawing sheet submitted after the filing date of 
an application must be labeled in the top margin as either "Replacement Sheet" or "New 
Sheet" pursuant to 37 CFR 1.121(d). If the changes are not accepted by the examiner, 
the applicant will be notified and informed of any required corrective action in the next 
Office action. The objection to the drawings will not be held in abeyance. 
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Specification 

3. The abstract of the disclosure is objected to because it exceeds 1 50 words in 
length. Correction is required. See MPEP § 608.01(b). 

Applicant is reminded of the proper language and format for an abstract of the 
disclosure. 

The abstract should be in narrative form and generally limited to a single 
paragraph on a separate sheet within the range of 50 to 1 50 words. It is important that 
the abstract not exceed 150 words in length since the space provided for the abstract 
on the computer tape used by the printer is limited. The form and legal phraseology 
often used in patent claims, such as "means" and "said," should be avoided. The 
abstract should describe the disclosure sufficiently to assist readers in deciding whether 
there is a need for consulting the full patent text for details. 

The language should be clear and concise and should not repeat information 
given in the title. It should avoid using phrases which can be implied, such as, "The 
disclosure concerns," "The disclosure defined by this invention," "The disclosure 
describes," etc. 

4. The disclosure is objected to because of the following informalities: "DES" (page 
1, line 31), "IDEA" (page 7, line 32). While well known in the art, these terms have not 
been defined. 
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Claim Rejections - 35 USC § 112 

5. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

6. Claim 9 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Claim 9 recites the limitation "switching to one of said second cryptographic 
algorithms 1 ' in line 2 of the claim. There is insufficient antecedent basis for this limitation 
in the claim. 

7. Claim 12 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Claim 12 recites the limitation "computer software product as claimed in claim 
10" in line 1 of the claim. There is insufficient antecedent basis for this limitation in the 
claim. 
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re- 
claim Rejections - 35 USC § 103 

8. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

9. Claims 1, 3, 5, 7-8, 10-11, and 13 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Kocher et al. (US Patent Number: 6,327,661), and further 
in view of Tschudin (NPL Apoptosis - the Programmed Death of Distributed 
Services"). 

Regarding claim 1, Kocher et al. teach a cryptographic system comprising first 
cryptographic algorithm means for enabling cryptographic operations (column 2, lines 
60-67, column 13, lines 20-67), input/output means for receiving input streams and 
sending output streams (column 13, lines 20-67, column 14, lines 61-67), wherein said 
input streams are transformed to said output streams by said cryptographic operations 
(column 13, lines 20-67), at least one test plaintext Pj and for each test plaintext Pj a 
corresponding test ciphertext Cj (column 13, lines 20-67), receiving means for receiving 
a control stream (column 13, lines 20-67, column 14, lines 1-60), checking means for 
checking whether said at least one test ciphertext Cj is the enciphered image of the 
corresponding test plaintext Pj under the cryptographic operation of said first 
cryptographic algorithm means (column 13, lines 20-67), switching means for stopping 
said cryptographic operations with said first cryptographic algorithm means (column 13, 
lines 20-67), wherein said stopping by said switching means is triggered by said 
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checking means (column 13, lines 20-67). Kocher et al. do not expressly disclose 
including at least one apoptosis key Kj. Kocher et al. teach self-destructing keys. 
However, Tschudin teaches the concept of "apoptosis" related to distributed services 
and computer security (sections 3-5). Therefore, it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to use an "apoptosis 
key". One of ordinary skill in the art would have been motivated to perform such a . 
modification to control the execution of services (Tschudin, sections 4-5). 

Regarding claim 3, Kocher et al. teach said receiving means is made for 
accepting control streams which include at least one plaintext Pj, for each plaintext Pi a 
corresponding ciphertext Cj (column 2, lines 60-67, column 3, lines 1-10) and said 
checking means is made for trying to find a test plaintext Pj and a test ciphertext Cj 
equal to said received plaintext Pi, wherein said checking is done with said apoptosis 
key of said equal test plaintext Pi and said equal test ciphertext Cj (column 13, lines 20- 
67, column 14, lines 61-67). Kocher et al. do not expressly disclose a corresponding 
apoptosis key Kj. Kocher et al. teach self-destructing keys. However, Tschudin teaches 
the concept of "apoptosis" related to distributed services and computer security 
(sections 3-5). Therefore, it would have been obvious to one having ordinary skill in the 
art at the time the invention was made to use an "apoptosis key". One of ordinary skill in 
the art would have been motivated to perform such a modification to control the 
execution of services (Tschudin, sections 4-5). 

Regarding claim 5, Kocher et al. teach a method for creating a cryptographic 
system for carrying out cryptographic operations characterized by the steps of 
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implementing within said cryptographic system a first cryptographic algorithm enabling 
said cryptographic operations (column 2, lines 60-67, column 3, lines 1-10), selecting at 
least one test plaintext Pj and enciphering each test plaintext Pi with said first 
cryptographic algorithm thereby generating a corresponding test ciphertext Cj for each 
test plaintext Pj (column 2, lines 60-67, column 13, lines 20-67), implementing within 
said cryptographic system said at least one test plaintext Pj and for each test plaintext Pj 
said corresponding test ciphertext Cj (column 13, lines 20-67, column 14, lines 61-67), 
implementing within said cryptographic system receiving means for receiving a control 
stream (column 13, lines 20-67, column 14, lines 61-67), implementing within said 
cryptographic system checking means for checking whether said at least one test 
ciphertext Cj is the enciphered image of the corresponding test plaintext Pj under said 
first cryptographic algorithm (column 13, lines 20-67), implementing within said 
cryptographic system switching means for stopping said cryptographic operations with 
said first cryptographic algorithm (column 13, lines 20-67), wherein said stopping by 
said switching means is triggered by said checking means (column 13, lines 20-67). 
Kocher et al. do not expressly disclose the use of one apoptosis key Kj. Kocher et al. 
teach self-destructing keys. However, Tschudin teaches the concept of "apoptosis" 
related to distributed services and computer security (sections 3-5). Therefore, it would 
have been obvious to one having ordinary skill in the art at the time the invention was 
made to use an "apoptosis key". One of ordinary skill in the art would have been 
motivated to perform such a modification to control the execution of services (Tschudin, 
sections 4-5). 
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Regarding claim 7, the combination of Kocher et al. and Tschudin does not 
expressly disclose publishing said at least one test plaintext Pj and for each test 
plaintext Pj said corresponding test ciphertext Cj. However, Examiner takes Official 
Notice that publishing information was conventional and well known at the time the 
invention was made. Furthermore, Kocher et al. stores plaintext and ciphertext prior to 
comparing them. Therefore, it would have been obvious to one having ordinary skill in 
the art at the time the invention was made to publish this information since Examiner 
takes Official Notice that it was conventional and well known. 

Regarding claim 8, Kocher et al. teach a method for operating a cryptographic 
system for carrying out cryptographic operations (column 2, lines 60-67, column 3, lines 
1-10) characterized by the steps of providing a first cryptographic algorithm for enabling 
said cryptographic operations (column 2, lines 60-67, column 13, lines 20-67), receiving 
input streams and sending output streams wherein said input streams are transformed 
to said output streams by said cryptographic operations (column 13, lines 20-67, column 
14, lines 61-67), receiving a control stream, checking whether a test ciphertext Cj is the 
enciphered image of a corresponding test plaintext Pj under said first cryptographic 
algorithm when using said key Kj (column 13, lines 20-67), stopping said cryptographic 
operations with said first cryptographic algorithm, if said test ciphertext Cj is the 
enciphered image of said corresponding test plaintext Pj under said first cryptographic 
algorithm (column 13, lines 20-67). Kocher et al. do not expressly disclose the use of • 
one apoptosis key Kj. Kocher et al. teach self-destructing keys. However, Tschudin 
teaches the concept of "apoptosis" related to distributed services and computer security 
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(sections 3-5). Therefore, it would have been obvious to one having ordinary skill in the 
art at the time the invention was made to use an "apoptosis key". One of ordinary skill in 
the art would have been motivated to perform such a modification to control the 
execution of services (Tschudin, sections 4-5). 

Regarding claim 10, Kocher et al. teach wherein said receiving of a control 
stream includes for each key Kj receiving of a plaintext Pj and a corresponding 
ciphertext C s (column 2, lines 60-67, column 3, lines 1-10), and said checking includes 
trying to find a test plaintext Pj and a test ciphertext Cj equal to said received plaintext 
Pi, and said received ciphertext Cj wherein said checking is done with said key of said 
equal test plaintext Pj and said equal test ciphertext Cj (column 13, lines 20-67, column 
14, lines 61-67). Kocher et al. do not expressly disclose an apoptosis key Kj. Kocher et 
al. teach self-destructing keys. However, Tschudin teaches the concept of "apoptosis" 
related to distributed services and computer security (sections 3-5). Therefore, it would 
have been obvious to one having ordinary skill in the art at the time the invention was 
made to use an "apoptosis key". One of ordinary skill in the art would have been 
motivated to perform such a modification to control the execution of services (Tschudin, 
sections 4-5). 

Regarding claim 11, Kocher et al. teach a computer software product for 
operating a cryptographic system for carrying out cryptographic operations (column 14, 
lines 5-60), said product is characterized by a computer-readable medium in which 
program instructions are stored (column 14, lines 5-60), which instructions, when read 
by a computer, enable the computer to perform a first cryptographic algorithm that is 
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enabling said cryptographic operations (column 2, lines 60-67, column 3, lines 1-10), 
receive input streams and send output streams wherein said input streams are 
transformed to said output streams by said cryptographic operations (column 13, lines 
20-67, column 14, lines 61-67), receive a control stream which is including at least one 
key Kj, check whether a test ciphertext Cj is the enciphered image of a corresponding 
test plaintext Pj under said first cryptographic algorithm when using said key Kj, stop 
said cryptographic operations with said first cryptographic algorithm (column 13, lines 
20-67), if said test ciphertext Cj is the enciphered image of said corresponding test 
plaintext Pj under said first cryptographic algorithm when using said key Kj (column 13, 
lines 20-67). Kocher et al. do not expressly disclose the use of one apoptosis key Kj. 
Kocher et al. teach self-destructing keys. However, Tschudin teaches the concept of 
"apoptosis" related to distributed services and computer security (sections 3-5). 
Therefore, it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to use an "apoptosis key". One of ordinary skill in the art would 
have been motivated to perform such a modification to control the execution of services 
(Tschudin, sections 4-5). 

Regarding claim 13, the combination of Kocher et al. and Tschudin teaches the 
limitations as set forth under claim 8 above. Furthermore, Kocher et al. teaches 
computer program comprising program code means for performing the steps of claim 8 
when said program is run on a computer (column 14, lines 5-60). 
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10. Claims 2 and 4 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Kocher et al. and Tschudin as applied to claim 1 above, and further in view 
of Esserman et al. (US Patent Number: 5,144,664). 

Regarding claim 2, the combination of Kocher et al. and Tschudin does not 
expressly disclose at least one second cryptographic algorithm means, wherein said 
switching means enables switching to said at least one second cryptographic algorithm 
means. However, Esserman et al. teach at least one second cryptographic algorithm 
means, wherein said switching means enables switching to said at least one second 
cryptographic algorithm means (column 4, lines 1-41). Therefore, it would have been 
obvious to one having ordinary skill in the art at the time the invention was made to 
switch between multiple encryption algorithms when an encryption algorithm is 
compromised. One of ordinary skill in the art would have been motivated to perform 
such a modification to maintain secure communications (Esserman et al., column 1, 
lines 39-67, column 2, lines 1-68). 

Regarding claim 4, the combination of Kocher et al. and Tschudin does not 
expressly disclose a cascaded list of different cryptographic algorithm means. However, 
Esserman et al. teach a cascaded list of different cryptographic algorithm means 
(column 4, lines 1-41). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to use a cascaded list of different 
cryptographic algorithm means. One of ordinary skill in the art would have been 
motivated to perform such a modification to maintain secure communications 
(Esserman et al., column 1, lines 39-67, column 2, lines 1-68). 
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11. Claim 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kocher et al. and Tschudin as applied to claim 5 above, and further in view of 
Esserman et al. 

Regarding claim 6, the combination of Kocher et al. and Tschudin does not 
expressly disclose implementing within said cryptographic system at least one second 
cryptographic algorithm for said ciphering operations, and switching by said switching 
means to said at least one second cryptographic algorithm. However, Esserman et al. 
teach implementing within said cryptographic system at least one second cryptographic 
algorithm for said ciphering operations, and switching by said switching means to said 
at least one second cryptographic algorithm (column 4, lines 1-41). Therefore, it would 
have been obvious to one having ordinary skill in the art at the time the invention was 
made to use at least one second cryptographic algorithm for said ciphering operations, 
and switching to a second cryptographic algorithm. One of ordinary skill in the art would 
have been motivated to perform such a modification to maintain secure communications 
(Esserman et al., column 1, lines 39-67, column 2, lines 1-68). 

12. Claim 9 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kocher et al. and Tschudin as applied to claim 8 above, and further in view of 
Esserman et al. 

Regarding claim 9, the combination of Kocher et al. and Tschudin does not 
expressly disclose switching to one of said second cryptographic algorithms for said 
cryptographic operations after said stopping. However, Esserman et al. teach switching 
to one of said second cryptographic algorithms for said cryptographic operations after 
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said stopping (column 4, lines 1-41). Therefore, it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to use a second 
cryptographic algorithm for said ciphering operations, and switching to a second 
cryptographic algorithm. One of ordinary skill in the art would have been motivated to 
perform such a modification to maintain secure communications (Esserman et al., 
column 1, lines 39-67, column 2, lines 1-68). 

13. Claim 12 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kocher et al. and Tschudin as applied to claim 11 above, and further in view of 
Esserman et al. 

Regarding claim 12, the combination of Kocher et al. and Tschudin does not 
expressly disclose computer software product, wherein said instructions, when read by 
a computer, enable the computer to perform at least a second cryptographic algorithm 
and switch to said at least one second cryptographic algorithms for said cryptographic 
operations after said stopping. However, Esserman et al. teach computer software 
product, wherein said instructions, when read by a computer, enable the computer to 
perform at least a second cryptographic algorithm and switch to said at least one 
second cryptographic algorithms for said cryptographic operations after said stopping 
(column 4, lines 1-41). Therefore, it would have been obvious to one having ordinary 
skill in the art at the time the invention was made to use a second cryptographic 
algorithm for said cryptographic operations, and switching to a second cryptographic 
algorithm. One of ordinary skill in the art would have been motivated to perform such a 
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modification to maintain secure communications (Esserman et al., column 1, lines 39- 
67, column 2, lines 1-68). 
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Conclusion 



14. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David G. Cervetti whose telephone number is (571) 272- 
5861. The examiner can normally be reached on Monday-Friday 7:00 am - 5:00 pm, off 
on Wednesday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on (571) 272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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